Teams

23 checks20 Medium3 Low

Meetings15External access4Messaging2File sharing1Apps1

Run theseInvoke-Maester -Product teamsCopy

23 checks

Group byFeatureAreaSeveritySuiteNone

Columns

FeatureAreaSeverityUser impactEffortATT&CKControlsSourceReset to default

ID↕Check↕Feature↕Area↕Severity↕User impact↕Effort↕ATT&CK↕Controls↕Source↕

CIS.M365.8.1.1Ensure external file sharing in Teams is enabled for only approved cloud storage servicesFile sharingExternal access and sharingMediumLowLowT1567.002cis-m365:8.1.1, nist-800-53-r5:AC-20 +1CISCIS.M365.8.1.2Ensure users can't send emails to a channel email addressNew in 3.0MessagingExternal access and sharingMediumMediumLowT1566cis-m365:8.1.2, nist-800-53-r5:AC-20CISCIS.M365.8.2.1Ensure external domains are restricted in the Teams admin centerNew in 3.0External accessExternal access and sharingMediumMediumLowT1566cis-m365:8.2.1, nist-800-53-r5:AC-20CISCIS.M365.8.2.2Ensure communication with unmanaged Teams users is disabledExternal accessExternal access and sharingMediumMediumLowT1566, T1204.001 +1cis-m365:8.2.2, nist-800-53-r5:AC-20CISCIS.M365.8.2.3Ensure external Teams users cannot initiate conversationsExternal accessExternal access and sharingMediumLowLowT1566, T1204.001 +1cis-m365:8.2.3, nist-800-53-r5:AC-20CISCIS.M365.8.2.4Ensure the organization cannot communicate with accounts in trial Teams tenantsNew in 3.0External accessExternal access and sharingMediumLowLowT1566cis-m365:8.2.4, nist-800-53-r5:AC-20CISCIS.M365.8.4.1Ensure app permission policies are configuredAppsApplications and workload identitiesMediumMediumMediumT1195, T1671cis-m365:8.4.1, nist-800-53-r5:CM-7CISCIS.M365.8.5.1Ensure anonymous users can't join a meetingNew in 3.0MeetingsExternal access and sharingMediumMediumLow—cis-m365:8.5.1, nist-800-53-r5:AC-3CISCIS.M365.8.5.2Ensure anonymous users and dial-in callers can't start a meetingNew in 3.0MeetingsExternal access and sharingMediumLowLow—cis-m365:8.5.2, nist-800-53-r5:AC-3CISCIS.M365.8.5.3Ensure only people in my org can bypass the lobbyMeetingsExternal access and sharingMediumMediumLow—cis-m365:8.5.3, nist-800-53-r5:AC-3CISCIS.M365.8.5.4Ensure users dialing in can't bypass the lobbyNew in 3.0MeetingsExternal access and sharingMediumLowLow—cis-m365:8.5.4, nist-800-53-r5:AC-3CISCIS.M365.8.5.5Ensure meeting chat does not allow anonymous usersNew in 3.0MeetingsExternal access and sharingMediumLowLowT1566cis-m365:8.5.5, nist-800-53-r5:AC-3CISCIS.M365.8.5.7Ensure external participants can't give or request controlNew in 3.0MeetingsExternal access and sharingMediumLowLowT1219cis-m365:8.5.7, nist-800-53-r5:AC-3CISCIS.M365.8.5.8Ensure external meeting chat is offNew in 3.0MeetingsExternal access and sharingMediumMediumLowT1566cis-m365:8.5.8, nist-800-53-r5:AC-3CISCIS.M365.8.6.1Ensure users can report security concerns in TeamsMessagingEmail and collaboration protectionMediumLowLowT1566cis-m365:8.6.1CISMT.1042Restrict dial-in users from bypassing a meeting lobbyMeetingsExternal access and sharingMediumLowLow—nist-800-53-r5:AC-3MaesterMT.1045Only invited users should be automatically admitted to Teams meetingsMeetingsExternal access and sharingMediumMediumLow—nist-800-53-r5:AC-3MaesterMT.1046Restrict anonymous users from joining meetingsMeetingsExternal access and sharingMediumMediumLow—nist-800-53-r5:AC-3MaesterMT.1047Restrict anonymous users from starting Teams meetingsMeetingsExternal access and sharingMediumLowLow—nist-800-53-r5:AC-3MaesterMT.1048Limit external participants from having control in a Teams meetingMeetingsExternal access and sharingMediumLowLow—nist-800-53-r5:AC-6MaesterCIS.M365.8.5.6Ensure only organizers and co-organizers can presentNew in 3.0MeetingsEmail and collaboration protectionLowMediumLowT1566.003cis-m365:8.5.6, nist-800-53-r5:AC-3CISCIS.M365.8.5.9Ensure meeting recording is off by defaultNew in 3.0MeetingsData protectionLowMediumLow—cis-m365:8.5.9, nist-800-53-r5:CM-7CISMT.1037Only users with Presenter role are allowed to present in Teams meetingsMeetingsEmail and collaboration protectionLowMediumLow—nist-800-53-r5:AC-6Maester